Cross-site Scripting Vulnerability in Premmerce Product Search for WooCommerce

CVE-2025-64289

What is CVE-2025-64289?

A Cross-site Scripting (XSS) vulnerability exists in the Premmerce Product Search for WooCommerce plugin that allows attackers to inject malicious scripts into web pages. This vulnerability can lead to the execution of arbitrary scripts in the context of a user's browser, potentially compromising sensitive user information or redirecting users to harmful sites. Affected versions include all installations up to 2.2.4, making it essential for users to update their plugins to mitigate the risk of exploitation.

References